This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft File: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft (raw, json) Hash identifier: GTxhSegZ2p1sp2oLGHejdpelEafrEVcrYYmsKH9+MeM= Subject key identifier: DF:72:4F:D3:7E:15:EC:AD:81:93:76:7D:3C:3F:96:DC:48:CC:05:06 Authority key identifier: F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D Certificate issuer: /CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d Certificate serial: 019AF23FCBECF2E1E8398861DCA355C62003 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft Manifest number: 031F Signing time: Sat 06 Dec 2025 06:00:58 +0000 Manifest this update: Sat 06 Dec 2025 06:00:58 +0000 Manifest next update: Sun 07 Dec 2025 06:00:58 +0000 Files and hashes: 1: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl (hash: NPyUYtNABIgPJWbhAJ/14nbU8VswYQThcS5MGCyNwt4=) 2: vAn1hXUKdqSNmKMN5EpP_udaSvg.roa (hash: KSkyWrBwmDHasLhukMvu07oX0o0MiqrtLLWwQJGc7Qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:cb:ec:f2:e1:e8:39:88:61:dc:a3:55:c6:20:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d Validity Not Before: Dec 6 06:00:58 2025 GMT Not After : Dec 7 06:00:58 2025 GMT Subject: CN=df724fd37e15ecad8193767d3c3f96dc48cc0506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:fa:30:6f:bc:e8:5c:33:1b:cf:90:a6:fa: 66:9e:fc:93:e1:ec:8b:02:bd:4f:21:3a:c0:f9:dd: 1e:ff:c3:03:4e:76:2a:34:ff:83:c1:1e:0b:4e:c3: 3e:8e:8b:e5:06:57:d0:01:19:af:0a:19:3f:98:97: 2c:d0:ca:cc:d6:4d:51:5a:5b:fd:4e:7b:ac:b9:06: a8:ee:c6:f4:e6:99:ce:25:da:70:9d:23:51:b3:47: f2:93:22:62:0c:be:b0:a1:90:92:46:88:f8:29:0b: 4f:e7:73:f8:ad:d6:7d:a6:2b:be:c5:fa:6e:d3:05: 79:de:8a:5a:a3:81:e9:5b:d5:01:e6:29:c9:6b:21: 6a:f1:d1:c9:83:98:20:1c:02:39:50:56:ad:62:e7: 94:be:89:da:81:40:21:38:25:ec:c0:af:8a:cf:e1: 0b:dd:a9:c3:e0:57:98:95:9c:5e:e7:eb:c4:a8:de: ff:ed:90:19:b8:0c:59:bb:6e:8e:d9:eb:1e:31:18: a9:01:ad:94:d4:27:c9:9a:5e:a7:37:4c:9b:4e:95: 80:d6:d5:97:40:2a:ff:c7:5f:90:06:1b:b4:a3:50: 9b:b7:bc:19:7a:cf:28:8e:15:b2:e7:ec:3a:3f:f6: 2b:98:e9:52:f4:49:f8:08:b4:31:6d:55:00:5f:e9: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:72:4F:D3:7E:15:EC:AD:81:93:76:7D:3C:3F:96:DC:48:CC:05:06 X509v3 Authority Key Identifier: keyid:F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:86:e7:95:07:95:cd:f7:5c:45:3b:34:90:aa:f8:f9:b3:11: 32:b8:2e:9d:3d:d6:3a:8b:1f:f2:36:f2:75:ec:ef:0c:f6:40: bd:35:d5:7b:eb:57:49:0a:1e:35:6e:34:d6:6e:5d:ce:7b:56: 13:60:b4:3e:0e:6c:04:cd:b7:bf:99:f0:64:a9:96:89:d6:05: 1f:4b:07:72:3e:51:b2:d9:19:6c:8f:61:23:66:9e:86:41:f3: ab:83:16:3a:82:d4:61:d7:63:75:6d:ae:e2:67:fe:5f:33:29: 2b:d5:59:87:c5:ca:d5:aa:6b:fc:ec:7a:88:cc:70:76:b0:ea: cd:2f:be:59:61:ba:02:4d:da:b5:97:71:d0:8b:2b:61:57:f4: bd:b2:e4:81:7b:32:6c:ca:93:50:bf:af:d1:32:27:53:e1:4e: 48:b5:cb:bc:da:2d:bd:88:d1:77:97:c0:22:eb:a7:56:3c:e0: 78:29:8c:33:6c:a7:53:d7:44:f1:83:74:84:e0:c5:0f:c8:5b: 70:9a:9c:82:b6:06:d3:a4:12:1f:26:29:e4:06:ce:d5:19:e6: d5:42:7b:2c:a2:10:3c:78:37:b7:ba:e4:27:c5:90:c7:88:f3: 81:2e:f0:f7:8d:ba:5b:ac:d9:95:c4:51:f1:25:18:42:7d:3a: a3:9d:9b:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8vs8uHoOYhh3KNVxiADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDMyM2FkNDhmNWE0NWJiY2E5ZTg3OTg4M2ZhZTkzMTRi NThlOWQwHhcNMjUxMjA2MDYwMDU4WhcNMjUxMjA3MDYwMDU4WjAzMTEwLwYDVQQD EyhkZjcyNGZkMzdlMTVlY2FkODE5Mzc2N2QzYzNmOTZkYzQ4Y2MwNTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn/6MG+86FwzG8+QpvpmnvyT4eyL Ar1PITrA+d0e/8MDTnYqNP+DwR4LTsM+jovlBlfQARmvChk/mJcs0MrM1k1RWlv9 TnusuQao7sb05pnOJdpwnSNRs0fykyJiDL6woZCSRoj4KQtP53P4rdZ9piu+xfpu 0wV53opao4HpW9UB5inJayFq8dHJg5ggHAI5UFatYueUvonagUAhOCXswK+Kz+EL 3anD4FeYlZxe5+vEqN7/7ZAZuAxZu26O2eseMRipAa2U1CfJml6nN0ybTpWA1tWX QCr/x1+QBhu0o1Cbt7wZes8ojhWy5+w6P/YrmOlS9En4CLQxbVUAX+lmUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9yT9N+FeytgZN2fTw/ltxIzAUGMB8GA1UdIwQY MBaAFPDTI61I9aRbvKnoeYg/rpMUtY6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy83ZGUyZGYtMTBkYi00YmJlLTkwNTIt NWZhYmQ2ZGM1ZjkzLzEvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy83ZGUyZGYtMTBkYi00YmJlLTkwNTItNWZhYmQ2ZGM1Zjkz LzEvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIbnlQeV zfdcRTs0kKr4+bMRMrgunT3WOosf8jbydezvDPZAvTXVe+tXSQoeNW401m5dzntW E2C0Pg5sBM23v5nwZKmWidYFH0sHcj5RstkZbI9hI2aehkHzq4MWOoLUYddjdW2u 4mf+XzMpK9VZh8XK1apr/Ox6iMxwdrDqzS++WWG6Ak3atZdx0IsrYVf0vbLkgXsy bMqTUL+v0TInU+FOSLXLvNotvYjRd5fAIuunVjzgeCmMM2ynU9dE8YN0hODFD8hb cJqcgrYG06QSHyYp5AbO1Rnm1UJ7LKIQPHg3t7rkJ8WQx4jzgS7w9426W6zZlcRR 8SUYQn06o52bPw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:40 2025 by rpki-client